Cross-site Scripting in OctoPrint

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-1432 · ADVISORY
• octoprint/octoprint commit 6d259d7 · WEB
• GitHub Advisory GHSA-h8pc-j334-jjhm · ADVISORY
• octoprint/octoprint · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/cb545c63-a3c1-4d57-8f06-e4593ab389bf · WEB

Altre vulnerabilità di octoprint

• CVE-2026-54134ALTO 7.0OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload han…
• CVE-2026-35163MEDIO 4.6OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popup…
• CVE-2026-23892MEDIO 5.9OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and including 1.11.5 are affected by a (th…
• CVE-2025-64187MEDIO 4.4OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allo…
• CVE-2025-58180ALTO 8.8OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerab…